We have an OpenShift cluster that is all internal, for dev purposes. It consists of a master + 2 nodes, all of which have a private IP. As long as the three
hosts can communicate (are on the same network or can route to one another, AND can resolve each other’s hostnames in DNS) then you’re good. These three hosts run CentOS 7 Atomic. A wildcard DNS record points to the IPs of the two nodes, where the routers
run, so its a round-robin DNS thing. Not the most optimal HA set up, but its simple and works well thus far.

Also, we used a regular CentOS 7 host (not Atomic) that’s not part of the cluster that acts as the “utility” server. It has Ansible installed and can ssh to all
the cluster hosts in order to fire off the playbooks.

We are just getting started so haven’t set up our production cluster yet. For that, I imagine we’ll need public IPs (assigned to our nodes that are running routers)
so that the world can get to our apps.

So anyway, I *think* the answer to your question is you need public IPs on the openshift nodes that run your routers if the applications are to be publicly
accessible. The blog post here suggests running your router on just the master:
https://tobrunet.ch/articles/dive-into-openshift-v3

…A wildcard DNS entry pointing to the IP address of the master. It is at this master where routers will run to allow for external clients to request application resources running within OpenShift.

Thanks for your reply. Just the main goal we want to obtain is to keep our traffic from pod to pod (using routes, router, dns-wildcard) internal. So performing al this stuf on a private IP. Is that
possible?

But: prereqs: you need ansible on the master, git, docker on master and node, ...
- So initially we need public ip's on our servers to install those prerequisitions?

- Do we need a public IP on every instance when we want to run the playbook? (it failed for resolving something to check ik yum-utils were installed).

- Is this a good solution?: (public IP and private on master and node). Install prereqs and execute playbook. So we have a cluster. After that deleting the public network and reexecuting the playbook
with only private ip's (or only a public ip on the master). Will this work?

So as you can see we can use some input in using the setup.
We want that the traffic between our nodes goes internally. So we probably need our own DNS server for hosts, routing, wildcards. (initially we try to cover this in /etc/hosts).

If someone has experience with the setup of OpenShift where the communication over routes (through the router) happends internally (so no public wildcard). Please share some knowledge :).

Information in this e-mail may be confidential. It is intended only for the addressee(s) identified above. If you are not the addressee(s), or an employee or agent of the addressee(s), please note that any dissemination, distribution, or copying of this communication
is strictly prohibited. If you have received this e-mail in error, please notify the sender of the error.